Certighost Active Directory CS Exploit Allows Low-Privileged Users to Compromise Domain

A newly disclosed Active Directory Certificate Services (AD CS) vulnerability, dubbed Certighost, allowed a low-privilege domain user to impersonate a Domain Controller and take over an entire Active Directory domain. Tracked as CVE-2026-54121, the flaw was patched in Microsoft’s July 2026 security updates following responsible disclosure earlier this year. AD CS is Microsoft’s public key […] The post Certighost Active Directory CS Exploit Allows Low-Privileged Users to Compromise Domain appeared first on Cyber Security News.